https://hiddencursor.com/blog/ Security operations, AI in the SOC, and incident response. en https://hiddencursor.com/blog/forty-alerts-one-attack/ https://hiddencursor.com/blog/forty-alerts-one-attack/ Mon, 14 Sep 2026 09:00:00 +0000 Security Operations Most security teams don't miss attacks for lack of alerts. They miss them because one intrusion arrives as dozens of disconnected signals. Here's how to turn alert volume into a single, readable attack storyline. https://hiddencursor.com/blog/ai-security-analyst-guardrails/ https://hiddencursor.com/blog/ai-security-analyst-guardrails/ Mon, 14 Sep 2026 09:00:00 +0000 AI in Security AI analysts are genuinely useful for the first shift of security work, if they come with the right guardrails. A practical guide to where AI helps, where it must not act alone, and what to ask before you switch one on. https://hiddencursor.com/blog/reversible-response-ransomware/ https://hiddencursor.com/blog/reversible-response-ransomware/ Mon, 14 Sep 2026 09:00:00 +0000 Incident Response Containment stops ransomware from spreading, but recovery decides what it costs you. How to design a reversible response plan that pairs fast isolation with endpoint rollback, immutable backups, and identity resets.